Archive
18 March 2004
Vulnerabilities first published on this day (UTC), newest first.
113 results · Feed
-
Unscored —CVE-2004-0323 Public exploit
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain pri…
-
Unscored —
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the…
-
Unscored —
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive inf…
-
Unscored —CVE-2004-0284 EPSS 17%
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CP…
-
Unscored —CVE-2004-0249 Public exploit
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable …
-
Unscored —CVE-2004-0358 Public exploit
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-0325 Public exploit
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" ar…
-
Unscored —CVE-2004-0266 Public exploit
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote…
-
Unscored —
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local use…
-
Unscored —
InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admind…
-
Unscored —
The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delet…
-
Unscored —
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening…
-
Unscored —CVE-2004-0251 Public exploit
Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other u…
-
Unscored —CVE-2004-0287 Public exploit
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a…
-
Unscored —
Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(0…
-
Unscored —
Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2…
-
Unscored —
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long tim…
-
Unscored —CVE-2004-0254 Public exploit
Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary scri…
-
Unscored —
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp…
-
Unscored —
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service…
-
Unscored —CVE-2004-0337 Public exploit
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary scri…
-
Unscored —CVE-2004-0340 Public exploit
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and S…
-
Unscored —CVE-2004-0242 Public exploit
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2)…
-
Unscored —CVE-2004-0360 Public exploit
Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vect…
-
Unscored —
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attacker…
-
Unscored —CVE-2004-0322 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary sc…
-
Unscored —CVE-2004-0303 Public exploit
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /gloss…
-
Unscored —
Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shel…
-
Unscored —CVE-2004-0245 Public exploit
Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2004-0361 Public exploit
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation faul…
-
Unscored —CVE-2004-0305 Public exploit
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execut…
-
Unscored —
Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privil…
-
Unscored —CVE-2004-0291 Public exploit
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords …
-
Unscored —CVE-2004-0301 Public exploit
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as ot…
-
Unscored —
YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers…
-
Unscored —
Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other use…
-
Unscored —CVE-2004-0275 Public exploit
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sens…